This paper stems from a day-long invited forum held on 22 January 2010 that discussed the most appropriate ways of measuring and mapping cybercrime to inform legislative, research and policy debates. This discussion paper draws primarily on discussions at the invited event, the public forum, position papers and other contributions from participants in summarising the main themes and findings that emerged.